Description
Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax.
References
- M-071 third-party-advisory government-resource
- 20020416 ansi outer join syntax in Oracle allows access to any data mailing-list
- oracle-ansi-sql-bypass-acl(8855) vdb-entry
- http://otn.oracle.com/deploy/security/pdf/sql_joins_alert.pdf
- 4523 vdb-entry
- 5236 vdb-entry